diff --git a/ChangeLog b/ChangeLog index cb8090f0b..f816c2b8f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,6 +6,7 @@ $Id$ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $ 3.3.4.0 (not yet released) +- bug #2996161 [import] properly escape import value 3.3.3.0 (not yet released) - patch #2982480 [navi] Do not group if there would be one table in group, diff --git a/libraries/import.lib.php b/libraries/import.lib.php index 2f50c5dc3..202d91b78 100644 --- a/libraries/import.lib.php +++ b/libraries/import.lib.php @@ -998,7 +998,7 @@ function PMA_buildSQL($db_name, &$tables, &$analyses = NULL, &$additional_sql = } $tempSQLStr .= (($is_varchar) ? "'" : ""); - $tempSQLStr .= (str_replace("'", "\'", (string)$tables[$i][ROWS][$j][$k])); + $tempSQLStr .= PMA_sqlAddslashes((string)$tables[$i][ROWS][$j][$k]); $tempSQLStr .= (($is_varchar) ? "'" : ""); if ($k != ($num_cols - 1)) {